Lead Information Security Engineer - Cloud Security Posture Management (Wiz)

Lead Information Security Engineer – Cloud Security Posture Management (Wiz) Location: Charlotte, NC | Chandler, AZ | Irving, TX (Hybrid) Duration: 7 Month Contract Position Overview We are seeking an experienced Lead Information Security Engineer to join a Cloud Workload Lifecycle Security team focused on securing enterprise cloud environments and supporting large-scale cloud transformation initiatives. This role will play a key part in the migration from Prisma Cloud Enterprise to Wiz Cloud Native Application Protection Platform (CNAPP) , with a primary focus on Cloud Security Posture Management (CSPM) . The ideal candidate will bring strong expertise in cloud security, automation, policy-as-code development, and public cloud platforms, helping drive the detection and remediation of cloud misconfigurations and configuration drift across enterprise environments. This position is ideal for a security engineer who enjoys building scalable security solutions, leveraging automation, and collaborating with cross-functional teams to strengthen cloud security at scale. Key Responsibilities Lead engineering efforts supporting the migration of CSPM capabilities from Prisma Cloud Enterprise to Wiz. Serve as a subject matter expert (SME) for Wiz CSPM capabilities, roadmap features, and best practices. Design, develop, and enhance Policy-as-Code (PaC) solutions using Rego to monitor cloud misconfigurations and configuration drift. Build automation capabilities to streamline policy development, deployment, and management. Configure and optimize Wiz detection capabilities for: Public cloud misconfigurations Configuration drift monitoring On-demand developer scanning with IDE integrations Translate security requirements into scalable Rego policies and cloud security controls. Develop and maintain API-driven integrations and automation solutions. Support troubleshooting and resolution of complex cloud security and CSPM-related issues. Collaborate closely with security engineers, cloud teams, developers, and vendors to ensure successful implementation of cloud security initiatives. Contribute to internal code repositories and engineering standards to improve overall code quality and operational efficiency. Create and maintain technical documentation, implementation guides, and operational procedures. Train and mentor team members on Policy-as-Code automation approaches and best practices. Participate in Agile Scrum or Kanban delivery processes and support continuous improvement initiatives. Required Qualifications 5+ years of Information Security Engineering experience. 4+ years of experience with Terraform and infrastructure automation. 2+ years of hands‑on experience securing Azure and Google Cloud environments. Experience with cloud security posture management, cloud configuration monitoring, or cloud governance. 1+ year of experience with Rego Policy Development and/or Resource Query Language (RQL). Strong Python development and automation experience. Experience integrating and processing data through REST APIs. Experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps. Strong analytical, troubleshooting, and problem‑solving skills. Excellent written and verbal communication skills. Experience working in Agile Scrum or Kanban environments. Ability to manage multiple priorities in a fast‑paced enterprise environment. Preferred Qualifications Hands‑on experience with Wiz in an engineering or support capacity. Advanced experience with Rego policy automation and Policy‑as‑Code frameworks. Strong understanding of DevSecOps practices and cloud deployment automation. Experience building API‑driven security automation solutions. Expertise with Infrastructure‑as‑Code (IaC) and Policy‑as‑Code (PaC) methodologies. Experience implementing automated testing frameworks. Kubernetes experience, including AKS, GKE, or OpenShift environments. Knowledge of cloud security frameworks and standards such as: NIST CIS Benchmarks Cloud Security Alliance (CSA) Experience supporting change management and incident management processes in large enterprise environments. Industry certifications such as: CISSP CISM CISA CRISC CCSK GIAC Certifications Microsoft Azure and/or Google Cloud certifications. Technical Skills Wiz CNAPP / CSPM Terraform Rego Policy Development Python Automation Azure Cloud Security Google Cloud Security REST APIs CI/CD Automation GitHub Actions GitLab CI Jenkins Azure DevOps Infrastructure as Code (IaC) Policy as Code (PaC) Kubernetes (AKS, GKE, OpenShift) DevSecOps Cloud Security Governance #J-18808-Ljbffr